CVE-2023-22856
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
概要
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory themissinglink.com.au
- package github.com